last executing test programs:

1.505064167s ago: executing program 1 (id=3912):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0xd, 0x0, &(0x7f0000001bc0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @remote, @broadcast}, &(0x7f00000002c0)=0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@struct={0x1, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x5, 0x4, 0xfffffffa}, {0x4, 0x1, 0xb12}, {0x2}, {0x2, 0x3, 0x5}, {0x5, 0x2, 0xffffffff}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x8, 0x4}, {0x1}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0xb, 0x1}]}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x3, 0x6}]}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0xf5, 0x0, 0x1, 0x0, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x8, 0x2, 0x80000000, 0x1800, r1, 0x1, '\x00', r2, r3, 0x1, 0x0, 0x3}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, 0x0, 0x0)
socket(0x23, 0x803, 0xfffffffd)
socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x0, 0x0, 0xfffffffd}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c000280080003400000000608000240000000020800014000000009200001804000000011080004400000000c0900010073797a300000000900020073797a3200000000140000001100010000000000000000000500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
listen(0xffffffffffffffff, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
close(0x3)
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x800000000000005)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1.315411233s ago: executing program 1 (id=3915):
r0 = socket(0x2, 0x2, 0x0)
getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0xfffffffffffffc9a)

1.229891369s ago: executing program 1 (id=3917):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

1.157741695s ago: executing program 1 (id=3921):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1.077974807s ago: executing program 1 (id=3924):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x4}, 0x8)

1.009681471s ago: executing program 1 (id=3929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001cc0))
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x2000004, 0x8, 0x8, 0x398a, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1}, 0x50)

939.60059ms ago: executing program 0 (id=3931):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e0000001"], 0x38}}, 0x0)

938.72746ms ago: executing program 0 (id=3933):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

889.699674ms ago: executing program 0 (id=3935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800)

889.153486ms ago: executing program 0 (id=3937):
r0 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x45, 0xce, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})

829.538708ms ago: executing program 0 (id=3939):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)}, 0x20)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

719.104595ms ago: executing program 2 (id=3941):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)

718.645125ms ago: executing program 2 (id=3942):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)

640.189395ms ago: executing program 2 (id=3943):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)

639.99009ms ago: executing program 2 (id=3944):
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

636.619953ms ago: executing program 2 (id=3949):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000800)={@val={0x8, 0xf8}, @val={0x2, 0x1, 0xce, 0x68, 0x8000, 0x9}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0xce, 0x64, 0x0, 0x8, 0x1, 0x0, @empty, @local}, @echo={0x8, 0x0, 0x0, 0xe0, 0x0, "27f372c92848c3c7355410391a5d3d0f9d9c56647b52d1061446ce7cf4d3ad624fe991754f46923e78bb1269e4d8bc3d0ba7627cfa2a5ceac760650dc2a0ab65dfb0306160b1a728fd05e627150deba0812e7574e746cc65359b60a87654836636c19551268bbafb09589a41d50cac4d6300764166ebf6646f057c7df0c384f4e31d1ba6f1bc6c5cf741239dd8cb2c38fe97190537d49c4f7d7d55e25089346ebbd3e1277e691793820cbd848ea2a687ca78"}}}, 0xdc)

197.814µs ago: executing program 0 (id=3945):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c0c4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0xa, 0xfffffffffffffec6)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x800)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)

0s ago: executing program 2 (id=3946):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000300))
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84020100af93fe9e718a3501f989f16d73c0e798"], 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x18, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000ffffffff00000000000000000e000000000000000000004da14e804c7e73cfee9b63a1f3203181"], 0x0, 0x2a}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000380)={@default, @null})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37417' (ED25519) to the list of known hosts.
syzkaller login: [   56.073343][ T5803] cgroup: Unknown subsys name 'net'
[   56.168171][ T5803] cgroup: Unknown subsys name 'cpuset'
[   56.176181][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.848767][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.369054][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.374818][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.378827][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.383708][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.387720][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.448206][ T5209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.454933][ T5209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.458741][ T5209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.463582][ T5209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.468166][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.537334][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.542952][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.546495][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.550740][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.554305][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.805855][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   63.816888][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   63.968223][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   63.975762][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.980020][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.983474][ T5819] bridge_slave_0: entered allmulticast mode
[   63.986599][ T5819] bridge_slave_0: entered promiscuous mode
[   64.009026][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.012014][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.015349][ T5819] bridge_slave_1: entered allmulticast mode
[   64.019643][ T5819] bridge_slave_1: entered promiscuous mode
[   64.048849][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.051347][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.055759][ T5824] bridge_slave_0: entered allmulticast mode
[   64.058714][ T5824] bridge_slave_0: entered promiscuous mode
[   64.099772][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.103157][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.106343][ T5824] bridge_slave_1: entered allmulticast mode
[   64.110417][ T5824] bridge_slave_1: entered promiscuous mode
[   64.117689][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.149959][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.191904][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.196772][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.199486][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.201982][ T5826] bridge_slave_0: entered allmulticast mode
[   64.205788][ T5826] bridge_slave_0: entered promiscuous mode
[   64.210683][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.214284][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.217374][ T5826] bridge_slave_1: entered allmulticast mode
[   64.221257][ T5826] bridge_slave_1: entered promiscuous mode
[   64.239994][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.260575][ T5819] team0: Port device team_slave_0 added
[   64.265100][ T5819] team0: Port device team_slave_1 added
[   64.281492][ T5824] team0: Port device team_slave_0 added
[   64.319283][ T5824] team0: Port device team_slave_1 added
[   64.323741][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.326070][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.336991][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.345665][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.363918][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.366951][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.377352][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.394638][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.453814][ T5819] hsr_slave_0: entered promiscuous mode
[   64.456812][ T5819] hsr_slave_1: entered promiscuous mode
[   64.460422][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.463323][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.473617][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.493072][ T5826] team0: Port device team_slave_0 added
[   64.496640][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.499282][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.509966][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.515900][ T5826] team0: Port device team_slave_1 added
[   64.596640][ T5824] hsr_slave_0: entered promiscuous mode
[   64.599173][ T5824] hsr_slave_1: entered promiscuous mode
[   64.601482][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   64.604356][ T5824] Cannot create hsr debugfs directory
[   64.616383][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.619489][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.630604][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.651028][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.655928][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.666361][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.810323][ T5826] hsr_slave_0: entered promiscuous mode
[   64.814381][ T5826] hsr_slave_1: entered promiscuous mode
[   64.817239][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   64.819474][ T5826] Cannot create hsr debugfs directory
[   64.942226][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.961522][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.988488][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.015583][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.072497][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.091814][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.101482][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.123942][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.188295][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.200991][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.208529][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.226175][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.325677][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.370011][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   65.387800][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.399416][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.424270][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   65.429128][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.431615][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.448143][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.450648][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.462607][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.465160][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.480347][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.482781][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.486103][   T54] Bluetooth: hci0: command tx timeout
[   65.496728][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   65.519074][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.521363][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.538528][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.540875][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.562889][   T54] Bluetooth: hci1: command tx timeout
[   65.633874][   T54] Bluetooth: hci2: command tx timeout
[   65.738902][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.788317][ T5819] veth0_vlan: entered promiscuous mode
[   65.810607][ T5819] veth1_vlan: entered promiscuous mode
[   65.833488][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.843529][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.848792][ T5819] veth0_macvtap: entered promiscuous mode
[   65.861453][ T5819] veth1_macvtap: entered promiscuous mode
[   65.890492][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.902137][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.920422][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.925177][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.944542][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.951737][ T5824] veth0_vlan: entered promiscuous mode
[   65.959954][ T5824] veth1_vlan: entered promiscuous mode
[   65.964690][ T5826] veth0_vlan: entered promiscuous mode
[   65.975688][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.985118][ T5826] veth1_vlan: entered promiscuous mode
[   66.060988][ T5824] veth0_macvtap: entered promiscuous mode
[   66.084796][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.087946][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.095894][ T5824] veth1_macvtap: entered promiscuous mode
[   66.099770][ T5826] veth0_macvtap: entered promiscuous mode
[   66.111929][ T5826] veth1_macvtap: entered promiscuous mode
[   66.152454][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.175794][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.188486][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.197781][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.198667][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.201297][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.217765][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.233305][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.246565][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.259702][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.292067][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.307486][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.311176][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.315866][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.324625][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.390563][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.397520][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.430157][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.438450][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.473487][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.477156][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.498674][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.501339][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.956354][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.058028][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.061821][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.076810][ T5933] syzkaller1: tun_chr_ioctl cmd 1074025677
[   67.079039][ T5933] syzkaller1: linktype set to 6
[   67.554290][   T54] Bluetooth: hci0: command tx timeout
[   67.569670][ T5970] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   67.580593][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'.
[   67.633685][   T54] Bluetooth: hci1: command tx timeout
[   67.662265][ T5978] netlink: 830 bytes leftover after parsing attributes in process `syz.0.46'.
[   67.715238][   T54] Bluetooth: hci2: command tx timeout
[   67.806280][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.888110][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'.
[   67.891305][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'.
[   67.998603][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.024243][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'.
[   68.234632][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.681471][ T6058] Zero length message leads to an empty skb
[   68.728146][ T6063] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[   68.834618][ T6070] gretap0: entered promiscuous mode
[   68.837339][ T6070] vlan2: entered promiscuous mode
[   68.926648][  T791] IPVS: starting estimator thread 0...
[   69.020339][ T6076] IPVS: using max 78 ests per chain, 187200 per kthread
[   69.047473][ T5883] IPVS: starting estimator thread 0...
[   69.119477][ T6089] tipc: Started in network mode
[   69.121848][ T6089] tipc: Node identity 6661103cae59, cluster identity 4711
[   69.128161][ T6089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.134333][ T6089] syzkaller0: entered promiscuous mode
[   69.137165][ T6089] syzkaller0: entered allmulticast mode
[   69.144804][ T6084] IPVS: using max 78 ests per chain, 187200 per kthread
[   69.200771][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   69.219804][ T6088] tipc: Resetting bearer <eth:syzkaller0>
[   69.235720][ T6088] tipc: Disabling bearer <eth:syzkaller0>
[   69.320951][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'.
[   69.632856][   T54] Bluetooth: hci0: command tx timeout
[   69.713932][   T54] Bluetooth: hci1: command tx timeout
[   69.796616][   T54] Bluetooth: hci2: command tx timeout
[   69.846671][ T6110] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   70.362211][ T6128] IPv6: addrconf: prefix option has invalid lifetime
[   70.409304][ T6131] netlink: 'syz.1.107': attribute type 9 has an invalid length.
[   70.418481][ T6125] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.454025][ T6129] bond_slave_0: entered promiscuous mode
[   70.456505][ T6129] bond_slave_1: entered promiscuous mode
[   70.459856][ T6129] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.500571][ T6129] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   70.519350][ T6137] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   70.522411][ T6137] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   71.315884][ T6196] netlink: 140 bytes leftover after parsing attributes in process `syz.0.138'.
[   71.397411][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.404573][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.713642][   T54] Bluetooth: hci0: command tx timeout
[   71.793559][   T54] Bluetooth: hci1: command tx timeout
[   71.873067][   T54] Bluetooth: hci2: command tx timeout
[   73.260928][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'.
[   73.260971][ T6262] syzkaller1: entered promiscuous mode
[   73.266481][ T6262] syzkaller1: entered allmulticast mode
[   73.408044][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   73.416619][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   73.620374][ T6278] netlink: 'syz.0.175': attribute type 13 has an invalid length.
[   73.632070][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'.
[   73.637374][ T6278] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   73.958049][   T54] Bluetooth: hci2: command tx timeout
[   74.169868][ T6310] tipc: New replicast peer: 255.255.255.83
[   74.177149][ T6310] tipc: Enabled bearer <udp:>, priority 10
[   74.334090][ T6319] syz.2.192 uses obsolete (PF_INET,SOCK_PACKET)
[   74.599770][ T6332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.198'.
[   74.610063][ T6333] syz.2.199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.619700][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.623593][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.627861][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.2.199 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   74.627878][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.627883][ T6333] Call Trace:
[   74.627888][ T6333]  <TASK>
[   74.627893][ T6333]  dump_stack_lvl+0x189/0x250
[   74.627910][ T6333]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.627920][ T6333]  ? __pfx__printk+0x10/0x10
[   74.627931][ T6333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.627942][ T6333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.627952][ T6333]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   74.627962][ T6333]  warn_alloc+0x214/0x310
[   74.627973][ T6333]  ? stack_depot_save_flags+0x40/0x900
[   74.627984][ T6333]  ? __pfx_warn_alloc+0x10/0x10
[   74.627992][ T6333]  ? kasan_save_track+0x4f/0x80
[   74.628012][ T6333]  ? xskq_create+0x56/0x170
[   74.628025][ T6333]  ? xsk_init_queue+0xb0/0x110
[   74.628038][ T6333]  ? xsk_setsockopt+0x4dc/0x8d0
[   74.628050][ T6333]  ? do_sock_setsockopt+0x17c/0x1b0
[   74.628060][ T6333]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   74.628068][ T6333]  ? do_syscall_64+0xfa/0x3b0
[   74.628084][ T6333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.628104][ T6333]  __vmalloc_node_range_noprof+0x125/0x12f0
[   74.628138][ T6333]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.628155][ T6333]  ? __kasan_kmalloc+0x93/0xb0
[   74.628174][ T6333]  vmalloc_user_noprof+0xad/0xf0
[   74.628187][ T6333]  ? xskq_create+0xbf/0x170
[   74.628203][ T6333]  xskq_create+0xbf/0x170
[   74.628221][ T6333]  xsk_init_queue+0xb0/0x110
[   74.628240][ T6333]  xsk_setsockopt+0x4dc/0x8d0
[   74.628257][ T6333]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.628272][ T6333]  ? __pfx_aa_sk_perm+0x10/0x10
[   74.628290][ T6333]  ? aa_sock_opt_perm+0x74/0x110
[   74.628302][ T6333]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   74.628311][ T6333]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.628321][ T6333]  do_sock_setsockopt+0x17c/0x1b0
[   74.628331][ T6333]  __x64_sys_setsockopt+0x13f/0x1b0
[   74.628341][ T6333]  do_syscall_64+0xfa/0x3b0
[   74.628351][ T6333]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.628361][ T6333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.628368][ T6333]  ? exc_page_fault+0x9f/0xf0
[   74.628379][ T6333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.628386][ T6333] RIP: 0033:0x7fec7018eb69
[   74.628395][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.628401][ T6333] RSP: 002b:00007fec710c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.628411][ T6333] RAX: ffffffffffffffda RBX: 00007fec703b5fa0 RCX: 00007fec7018eb69
[   74.628417][ T6333] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   74.628421][ T6333] RBP: 00007fec70211df1 R08: 0000000000000004 R09: 0000000000000000
[   74.628425][ T6333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.628430][ T6333] R13: 0000000000000000 R14: 00007fec703b5fa0 R15: 00007ffde7126958
[   74.628442][ T6333]  </TASK>
[   74.628446][ T6333] Mem-Info:
[   74.742284][ T6333] active_anon:5339 inactive_anon:0 isolated_anon:0
[   74.742284][ T6333]  active_file:870 inactive_file:38209 isolated_file:0
[   74.742284][ T6333]  unevictable:1768 dirty:1469 writeback:0
[   74.742284][ T6333]  slab_reclaimable:9222 slab_unreclaimable:52391
[   74.742284][ T6333]  mapped:19128 shmem:2435 pagetables:896
[   74.742284][ T6333]  sec_pagetables:0 bounce:0
[   74.742284][ T6333]  kernel_misc_reclaimable:0
[   74.742284][ T6333]  free:303071 free_pcp:20754 free_cma:0
[   74.760737][ T6333] Node 0 active_anon:13004kB inactive_anon:0kB active_file:724kB inactive_file:7732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49184kB dirty:1884kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7152kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.773611][ T6333] Node 1 active_anon:8352kB inactive_anon:0kB active_file:2756kB inactive_file:145104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27328kB dirty:3992kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4384kB pagetables:1548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.794056][ T6333] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.807074][ T6333] lowmem_reserve[]: 0 814 814 814 814
[   74.809329][ T6333] Node 0 DMA32 free:409876kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12868kB inactive_anon:0kB active_file:724kB inactive_file:7732kB unevictable:3536kB writepending:1884kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:31840kB local_pcp:15500kB free_cma:0kB
[   74.841604][ T6333] lowmem_reserve[]: 0 0 0 0 0
[   74.847023][ T6333] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.874638][ T6333] lowmem_reserve[]: 0 0 854 854 854
[   74.883204][ T6333] Node 1 Normal free:327600kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8212kB inactive_anon:0kB active_file:2756kB inactive_file:145104kB unevictable:3536kB writepending:3996kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:51648kB local_pcp:31884kB free_cma:0kB
[   74.919149][ T6333] lowmem_reserve[]: 0 0 0 0 0
[   74.921165][ T6333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   74.928037][ T6333] Node 0 DMA32: 703*4kB (U) 220*8kB (UM) 13*16kB (UE) 10*32kB (UE) 86*64kB (UE) 19*128kB (UE) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 95*4096kB (M) = 409836kB
[   74.935186][ T6333] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   74.949529][ T6333] Node 1 Normal: 244*4kB (UME) 586*8kB (UM) 355*16kB (UME) 157*32kB (UME) 45*64kB (UME) 15*128kB (UM) 7*256kB (UM) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 71*4096kB (M) = 327600kB
[   74.973431][ T6333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.977876][ T6333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.981982][ T6333] 41515 total pagecache pages
[   75.002809][ T6333] 0 pages in swap cache
[   75.004869][ T6333] Free swap  = 124996kB
[   75.006725][ T6333] Total swap = 124996kB
[   75.008592][ T6333] 786301 pages RAM
[   75.010263][ T6333] 0 pages HighMem/MovableOnly
[   75.012333][ T6333] 240546 pages reserved
[   75.034703][ T6333] 0 pages cma reserved
[   75.038355][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'.
[   75.145942][ T6350] tipc: Started in network mode
[   75.147697][ T6350] tipc: Node identity aad7475437f4, cluster identity 4711
[   75.154266][ T6350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.159941][ T6349] tipc: Resetting bearer <eth:syzkaller0>
[   75.275598][ T6358] netlink: 'syz.2.211': attribute type 2 has an invalid length.
[   75.304570][   T51] tipc: Node number set to 3359117372
[   76.273705][ T5869] tipc: Node number set to 2636334932
[   76.717413][ T6349] tipc: Disabling bearer <eth:syzkaller0>
[   76.840657][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'.
[   76.845462][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[   76.896049][ T6393] netlink: 'syz.0.226': attribute type 2 has an invalid length.
[   77.190433][ T6416] trusted_key: syz.0.236 sent an empty control message without MSG_MORE.
[   77.416103][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'.
[   77.491682][ T6433] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[   78.168609][ T6463] delete_channel: no stack
[   78.337830][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'.
[   78.722308][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'.
[   78.876486][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'.
[   78.885599][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'.
[   78.905999][ T6497] vlan0: entered promiscuous mode
[   79.010793][ T6499] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   79.636726][ T6525] vlan0: entered promiscuous mode
[   80.140146][ T6553] syzkaller1: entered promiscuous mode
[   80.153528][ T6553] syzkaller1: entered allmulticast mode
[   80.350818][ T6561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.359463][ T6561] syzkaller0: entered promiscuous mode
[   80.362396][ T6561] syzkaller0: entered allmulticast mode
[   80.390123][ T6561] tipc: Resetting bearer <eth:syzkaller0>
[   80.412362][ T6559] tipc: Resetting bearer <eth:syzkaller0>
[   80.429478][ T6559] tipc: Disabling bearer <eth:syzkaller0>
[   80.600254][ T6571] vxlan0: entered promiscuous mode
[   80.604871][ T6571] vxlan0: entered allmulticast mode
[   80.609932][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.610224][ T6573] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   80.617633][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.628279][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.632268][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.743474][ T6578] bond1: entered promiscuous mode
[   80.920369][ T6587] netlink: 'syz.2.317': attribute type 1 has an invalid length.
[   80.940933][ T6589] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.375438][ T6608] tipc: Started in network mode
[   81.385883][ T6608] tipc: Node identity 7ec8b64d1b3d, cluster identity 4711
[   81.395785][ T6608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.400061][ T6608] syzkaller0: entered promiscuous mode
[   81.402276][ T6608] syzkaller0: entered allmulticast mode
[   81.418577][ T6608] tipc: Resetting bearer <eth:syzkaller0>
[   81.419718][ T6610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.327'.
[   81.428265][ T6607] tipc: Resetting bearer <eth:syzkaller0>
[   81.452483][ T6607] tipc: Disabling bearer <eth:syzkaller0>
[   81.966116][ T6627] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   81.982587][ T6627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   82.039672][ T6629] Illegal XDP return value 295227425 on prog  (id 51) dev N/A, expect packet loss!
[   83.246477][ T6687] netlink: 'syz.0.363': attribute type 2 has an invalid length.
[   83.279344][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'.
[   83.506975][ T6707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.373'.
[   83.511087][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.080429][ T6745] netlink: 'syz.0.392': attribute type 10 has an invalid length.
[   84.094587][ T6745] bond_slave_0: left promiscuous mode
[   84.097420][ T6745] bond_slave_1: left promiscuous mode
[   84.126295][ T6745] bond_slave_0: entered promiscuous mode
[   84.129937][ T6745] bond_slave_1: entered promiscuous mode
[   84.154337][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.157580][ T6745] team0: Device bond0 failed to register rx_handler
[   84.193201][ T6745] bond_slave_0: left promiscuous mode
[   84.203914][ T6745] bond_slave_1: left promiscuous mode
[   84.475506][ T6770] netlink: 'syz.2.404': attribute type 35 has an invalid length.
[   84.707854][ T6787] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   84.918946][ T6805] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[   84.955361][ T6805] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.985423][ T6805] bond2: (slave bridge1): making interface the new active one
[   84.993498][ T6805] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   85.004151][ T6808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.421'.
[   85.021764][ T6805] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.246131][ T6822] netlink: 104 bytes leftover after parsing attributes in process `syz.0.428'.
[   85.289327][ T6828] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   85.517649][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'.
[   85.643637][ T6845] netlink: 'syz.2.439': attribute type 13 has an invalid length.
[   85.646911][ T6845] netlink: 'syz.2.439': attribute type 17 has an invalid length.
[   85.649884][ T6857] netlink: 104 bytes leftover after parsing attributes in process `syz.1.442'.
[   85.741923][ T6845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.807207][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.868059][ T6854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.890061][ T6874] macsec1: entered promiscuous mode
[   85.895101][ T6874] macsec1: entered allmulticast mode
[   85.935335][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.634506][ T6903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.463'.
[   86.765149][   T10] cfg80211: failed to load regulatory.db
[   87.373877][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.472'.
[   87.395525][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[   87.494841][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.474'.
[   87.561958][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'.
[   88.306663][ T6960] block nbd0: server does not support multiple connections per device.
[   88.323239][ T6960] block nbd0: shutting down sockets
[   88.413125][ T6970] warning: `syz.2.492' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.549364][ T6977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.555916][ T6977] syzkaller0: entered promiscuous mode
[   88.558537][ T6977] syzkaller0: entered allmulticast mode
[   88.599189][ T6977] tipc: Resetting bearer <eth:syzkaller0>
[   88.670216][ T6976] tipc: Resetting bearer <eth:syzkaller0>
[   88.741492][ T6976] tipc: Disabling bearer <eth:syzkaller0>
[   88.785055][ T5869] IPVS: starting estimator thread 0...
[   88.852263][ T6994] bridge2: entered promiscuous mode
[   88.873602][ T6989] IPVS: using max 48 ests per chain, 115200 per kthread
[   89.014624][ T7006] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.507'.
[   89.955732][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'.
[   89.990834][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'.
[   90.001625][ T7049] IPVS: length: 220 != 24
[   90.164937][ T7063] netlink: 'syz.1.535': attribute type 29 has an invalid length.
[   90.168630][ T7063] netlink: 'syz.1.535': attribute type 29 has an invalid length.
[   90.223979][ T7066] netlink: 300 bytes leftover after parsing attributes in process `syz.1.536'.
[   90.375972][ T7078] smc: net device bond0 applied user defined pnetid SYZ2
[   90.889356][ T7106] ieee802154 phy0 wpan0: encryption failed: -22
[   91.476432][ T7128] pimreg: entered allmulticast mode
[   92.208211][ T7161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   92.479996][ T7174] netlink: 788 bytes leftover after parsing attributes in process `syz.2.586'.
[   92.651437][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'.
[   92.730375][ T7190] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   92.900151][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[   92.931415][ T7203] nbd: socks must be embedded in a SOCK_ITEM attr
[   93.031333][ T7213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.601'.
[   93.343716][ T7231] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   93.731794][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[   93.927480][ T7250] netlink: 'syz.0.619': attribute type 4 has an invalid length.
[   94.204253][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'.
[   94.369421][ T7287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.634791][ T7287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.759559][ T7287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.772067][ T7301] netlink: 'syz.2.641': attribute type 4 has an invalid length.
[   94.856498][ T7287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.962379][ T5848] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.006072][ T5830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.048599][ T5848] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.089374][ T5848] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.262122][ T7335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.345852][ T7343] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   95.354699][ T7343] macvtap1: entered allmulticast mode
[   95.356715][ T7343] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   95.366406][ T7343] batman_adv: batadv0: Adding interface: macvtap1
[   95.373968][ T7343] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.387037][ T7343] batman_adv: batadv0: Interface activated: macvtap1
[   95.529259][ T7362] nbd: must specify at least one socket
[   95.589938][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[   95.748560][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'.
[   95.783854][ T7384] : renamed from pim6reg1
[   95.852344][ T7389] dvmrp8: entered allmulticast mode
[   95.871859][ T7379] dvmrp8: left allmulticast mode
[   95.966292][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.990578][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'.
[   96.522018][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.825828][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.849479][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.934438][ T7422] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[   96.960978][ T7422] vlan0: left promiscuous mode
[   97.054300][ T7422] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   97.136037][ T7422] batman_adv: batadv0: Interface deactivated: macvtap1
[   97.139546][ T7422] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   97.145253][ T7422] macvtap1: left allmulticast mode
[   97.165639][ T5830] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.173759][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.188300][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.192078][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.429929][ T7444] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   97.717534][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[   97.917738][ T7457] syzkaller0: entered promiscuous mode
[   97.920437][ T7457] syzkaller0: entered allmulticast mode
[   97.926372][ T7457] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   98.157893][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'.
[   98.290552][ T7475] tun0: tun_chr_ioctl cmd 1074025681
[   98.379583][ T7477] netlink: 'syz.0.721': attribute type 3 has an invalid length.
[   98.447690][ T7483] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   98.450884][ T7483] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.708553][ T7502] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[   98.711439][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'.
[   98.722560][ T7502] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[   98.726640][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'.
[   98.727033][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.736125][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.740857][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.746628][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.944692][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[   99.314369][ T7537] syzkaller0: entered promiscuous mode
[   99.316663][ T7537] syzkaller0: entered allmulticast mode
[   99.380027][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'.
[   99.384445][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'.
[  101.412028][ T7590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.416775][ T7590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.459734][ T7595] netlink: 'syz.1.771': attribute type 21 has an invalid length.
[  101.465100][ T7595] netlink: 152 bytes leftover after parsing attributes in process `syz.1.771'.
[  101.520552][ T7590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.526950][ T7590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.636363][ T7590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.641190][ T7590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.735141][ T7590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.739679][ T7590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.877377][ T5848] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.881193][ T5848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.898766][ T5848] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.903067][ T5848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.921356][ T5848] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.925550][ T5848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.942820][ T5848] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.946353][ T5848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.176644][ T7624] bond0: Device is already in use.
[  102.220415][ T5848] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  102.565653][ T7647] netlink: 92 bytes leftover after parsing attributes in process `syz.0.792'.
[  102.972331][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'.
[  103.130285][ T7690] netlink: 'syz.1.813': attribute type 11 has an invalid length.
[  103.133616][ T7690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.813'.
[  103.176700][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[  103.207342][ T7698] syz.1.816 (7698) used greatest stack depth: 18168 bytes left
[  103.418528][ T7718] netlink: 'syz.0.826': attribute type 1 has an invalid length.
[  103.454228][ T7718] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.476135][ T7718] bond3: (slave bridge2): making interface the new active one
[  103.481087][ T7718] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  103.498480][ T7718] gretap1: entered promiscuous mode
[  103.506904][ T7718] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  103.520527][ T7718] macvlan4: entered promiscuous mode
[  103.523411][ T7718] macvlan4: entered allmulticast mode
[  103.526673][ T7718] bond3: entered promiscuous mode
[  103.528940][ T7718] bridge2: entered promiscuous mode
[  103.534278][ T7718] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  103.538243][ T7718] bond3: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  103.546544][ T7718] bond3: left promiscuous mode
[  103.548845][ T7718] bridge2: left promiscuous mode
[  103.827769][ T7744] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[  103.834946][ T7744] netlink: 'syz.0.839': attribute type 2 has an invalid length.
[  103.850647][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  104.060052][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[  104.063257][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[  104.151003][ T7771] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  104.309600][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.339784][ T5849] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  104.345187][ T5849] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  104.368400][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.371924][   T27] wlan1: authenticated
[  104.384148][   T32] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  104.430012][   T69] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  104.433674][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.443004][   T69] wlan1: associated
[  105.065762][ T7842] !: renamed from dummy0 (while UP)
[  105.721621][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  106.518778][ T7954] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  106.719705][ T7977] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  106.741103][ T7977] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.771338][ T7977] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.779729][ T7977] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  106.790471][ T7977] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  106.840861][ T7982] veth3: entered promiscuous mode
[  106.847992][ T7982] bond3: (slave veth3): Enslaving as an active interface with a down link
[  106.872112][ T7977] erspan0: entered allmulticast mode
[  106.879154][ T7977] bond3: (slave erspan0): making interface the new active one
[  106.883977][ T7977] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  106.950507][ T7990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.911'.
[  107.007655][ T7996] netlink: 'syz.2.915': attribute type 15 has an invalid length.
[  107.171239][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'.
[  107.176045][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'.
[  107.195256][ T8005] netlink: 'syz.2.918': attribute type 13 has an invalid length.
[  107.198512][ T8005] netlink: 'syz.2.918': attribute type 17 has an invalid length.
[  107.210765][ T8005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.436479][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  107.440279][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  107.498331][ T8024] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  108.277256][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.957'.
[  108.367257][ T8092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  108.553225][ T8108] veth0_to_team: entered promiscuous mode
[  108.556479][ T8108] veth0_to_team: entered allmulticast mode
[  108.931381][   T33] audit: type=1800 audit(1754073939.793:2): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.980" name="memory.events" dev="tmpfs" ino=1513 res=0 errno=0
[  108.947654][   T33] audit: type=1804 audit(1754073939.813:3): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.980" name="memory.events" dev="tmpfs" ino=1513 res=1 errno=0
[  108.996096][ T8145] bridge3: the hash_elasticity option has been deprecated and is always 16
[  109.000304][ T8145] bridge3: entered allmulticast mode
[  109.215588][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'.
[  110.809957][ T8279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.825021][ T8279] syzkaller0: entered promiscuous mode
[  110.828209][ T8279] syzkaller0: entered allmulticast mode
[  110.860658][ T8279] tipc: Resetting bearer <eth:syzkaller0>
[  110.871634][ T8278] tipc: Resetting bearer <eth:syzkaller0>
[  110.886054][ T8283] netlink: 'syz.0.1047': attribute type 1 has an invalid length.
[  110.889357][ T8283] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1047'.
[  110.890123][ T8278] tipc: Disabling bearer <eth:syzkaller0>
[  110.966254][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'.
[  111.887037][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'.
[  111.891223][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'.
[  112.136161][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1086'.
[  112.520980][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'.
[  112.524739][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'.
[  112.661718][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  112.666427][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  112.669499][ T8414] netlink: 'syz.1.1103': attribute type 13 has an invalid length.
[  112.672191][ T8414] netlink: 'syz.1.1103': attribute type 12 has an invalid length.
[  112.708794][ T8418] Dead loop on virtual device ip6_vti0, fix it urgently!
[  112.741342][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'.
[  113.248280][ T8455] pimreg3: entered allmulticast mode
[  113.300917][ T8460] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  115.178547][ T8536] Bluetooth: MGMT ver 1.23
[  115.260827][ T8546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.302584][ T8553] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  115.306374][ T8553] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  116.085737][ T8617] __nla_validate_parse: 6 callbacks suppressed
[  116.085752][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.286647][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'.
[  116.302137][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'.
[  116.319880][ T8634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  116.377329][ T7959] udevd[7959]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  116.390846][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.478510][ T8646] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  116.921679][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'.
[  116.947497][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'.
[  117.354160][ T8707] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.357952][ T8707] bridge0: port 3(bond4) entered blocking state
[  117.361225][ T8707] bridge0: port 3(bond4) entered disabled state
[  117.365527][ T8707] bond4: entered allmulticast mode
[  117.380646][ T8707] bond4: entered promiscuous mode
[  117.447427][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1233'.
[  117.455390][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1233'.
[  117.480895][ T8707] dummy0: entered promiscuous mode
[  117.485551][ T8707] team0: entered promiscuous mode
[  117.487935][ T8707] team_slave_0: entered promiscuous mode
[  117.491661][ T8707] team_slave_1: entered promiscuous mode
[  117.500730][ T8707] bridge0: port 4(hsr1) entered blocking state
[  117.504022][ T8707] bridge0: port 4(hsr1) entered disabled state
[  117.507697][ T8707] hsr1: entered allmulticast mode
[  117.510811][ T8707] dummy0: entered allmulticast mode
[  117.513532][ T8707] team0: entered allmulticast mode
[  117.516089][ T8707] team_slave_0: entered allmulticast mode
[  117.518733][ T8707] team_slave_1: entered allmulticast mode
[  117.523742][ T8707] hsr1: entered promiscuous mode
[  117.818371][ T8746] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  118.067822][ T8776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1259'.
[  118.110203][ T8780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1261'.
[  118.159276][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'.
[  118.227155][ T8784] team0: Port device team_slave_0 removed
[  118.243084][ T8791] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  118.315333][ T8788] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  118.318577][ T8796] netlink: 'syz.1.1267': attribute type 32 has an invalid length.
[  118.335663][ T8796] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  118.760383][ T8835] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  118.766248][ T8835] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  119.927600][ T8943] batadv_slave_1: entered promiscuous mode
[  119.932093][ T8942] batadv_slave_1: left promiscuous mode
[  120.746381][ T8969] netlink: 'syz.2.1347': attribute type 11 has an invalid length.
[  120.935202][   T33] audit: type=1107 audit(1754073951.803:4): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  121.294907][ T8987] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  121.298051][ T8987] netlink: 'syz.1.1355': attribute type 4 has an invalid length.
[  121.301391][ T8987] __nla_validate_parse: 7 callbacks suppressed
[  121.301401][ T8987] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1355'.
[  121.314613][ T8987] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  121.318157][ T8987] netlink: 'syz.1.1355': attribute type 4 has an invalid length.
[  121.321575][ T8987] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1355'.
[  121.773175][ T9032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1371'.
[  121.823015][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  121.835287][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'.
[  122.091833][ T9051] netlink: 'syz.2.1378': attribute type 10 has an invalid length.
[  122.098712][ T9050] openvswitch: netlink: Actions may not be safe on all matching packets
[  122.108472][ T9051] team0: Port device 0! added
[  123.321551][ T9113] netlink: 'syz.2.1405': attribute type 1 has an invalid length.
[  123.330021][ T9113] netlink: 'syz.2.1405': attribute type 2 has an invalid length.
[  123.334683][ T9113] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1405'.
[  123.654305][ T9133] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1414'.
[  123.745802][ T9141] netlink: 'syz.0.1418': attribute type 3 has an invalid length.
[  123.753984][ T9141] syz_tun: entered allmulticast mode
[  123.762006][ T9141] pimreg: left allmulticast mode
[  123.819511][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'.
[  123.829675][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  123.840270][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.846578][ T9149] 8021q: adding VLAN 0 to HW filter on device team0
[  123.850745][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'.
[  123.855021][ T9149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.891138][ T9140] syz_tun: left allmulticast mode
[  124.033852][ T9167] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  124.884346][ T9217] netlink: 'syz.0.1449': attribute type 10 has an invalid length.
[  125.188989][ T9238] pim6reg1: entered allmulticast mode
[  125.510479][ T9257] netlink: 'syz.0.1469': attribute type 1 has an invalid length.
[  125.538117][ T9259] netlink: 'syz.1.1470': attribute type 1 has an invalid length.
[  125.541130][ T9259] netlink: 'syz.1.1470': attribute type 3 has an invalid length.
[  126.054990][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.100665][ T9320] syz.2.1497 uses old SIOCAX25GETINFO
[  126.233823][ T9331] vlan2: entered allmulticast mode
[  126.236035][ T9331] veth1: entered allmulticast mode
[  126.468552][ T9354] netlink: 'syz.0.1514': attribute type 46 has an invalid length.
[  127.048537][ T9393] netlink: 'syz.1.1531': attribute type 2 has an invalid length.
[  127.359295][ T9419] netlink: 'syz.1.1543': attribute type 32 has an invalid length.
[  127.365863][ T9419] __nla_validate_parse: 13 callbacks suppressed
[  127.365892][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  127.373826][ T9419] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  127.474124][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'.
[  127.585200][ T9426] hsr_slave_1 (unregistering): left promiscuous mode
[  127.590506][ T9436] netlink: 'syz.2.1551': attribute type 12 has an invalid length.
[  127.658722][ T9438] netlink: del zone limit has 4 unknown bytes
[  127.748992][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  127.805887][ T9455] tipc: Enabled bearer <eth:team0>, priority 31
[  128.808653][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'.
[  128.816258][ T9484] pim6reg: entered allmulticast mode
[  128.820510][ T9484] pim6reg: left allmulticast mode
[  129.176868][ T9502] netlink: 'syz.2.1579': attribute type 16 has an invalid length.
[  129.180811][ T9502] netlink: 'syz.2.1579': attribute type 17 has an invalid length.
[  129.294622][ T9505] IPv6: NLM_F_REPLACE set, but no existing node found!
[  129.315625][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.319313][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.498778][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.513323][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.627446][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'.
[  129.637555][ T5848] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.640759][ T5848] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.648788][ T5848] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.656623][ T5848] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.665676][ T5848] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.674179][ T5848] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.678158][ T5848] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.681900][ T5848] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.852859][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.205047][ T9534] Bluetooth: MGMT ver 1.23
[  130.836422][ T9554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1604'.
[  130.934183][ T9556] tipc: Resetting bearer <eth:team0>
[  131.002498][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.009583][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.061982][ T9563] netlink: 'syz.2.1608': attribute type 11 has an invalid length.
[  131.067037][ T9556] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  131.067189][ T9563] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1608'.
[  131.134258][ T5848] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.146804][ T5848] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.182015][ T5848] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.193777][ T5848] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.327881][ T9579] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1615'.
[  131.376937][ T9583] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1619'.
[  131.996830][ T9604] IPVS: Scheduler module ip_vs_ not found
[  132.252240][ T9628] netlink: 'syz.2.1637': attribute type 10 has an invalid length.
[  132.256177][ T9628] syz_tun: entered promiscuous mode
[  132.264836][ T9628] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  132.346391][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'.
[  132.569874][ T9664] __nla_validate_parse: 1 callbacks suppressed
[  132.569898][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'.
[  132.660760][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1660'.
[  132.676501][ T9676] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1660'.
[  132.732147][ T9686] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1664'.
[  132.732237][ T9685] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1665'.
[  132.739068][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'.
[  132.837052][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.839243][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.949932][ T9713] netlink: 'syz.2.1678': attribute type 12 has an invalid length.
[  132.954060][ T9713] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1678'.
[  133.152114][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1681'.
[  133.158144][ T9721] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1681'.
[  133.726420][ T9734] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  133.744729][ T9734] gretap1: left promiscuous mode
[  133.748986][ T9734] bridge3: left allmulticast mode
[  133.760607][ T5848] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.797442][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'.
[  133.899001][ T5848] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.903419][ T5848] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.914435][ T9736] hsr1: left allmulticast mode
[  133.916172][ T9736] dummy0: left allmulticast mode
[  133.917961][ T9736] team0: left allmulticast mode
[  133.919884][ T9736] team_slave_0: left allmulticast mode
[  133.922501][ T9736] team_slave_1: left allmulticast mode
[  133.944370][ T9736] hsr1: left promiscuous mode
[  133.946667][ T9736] bridge0: port 4(hsr1) entered disabled state
[  133.969209][ T9736] bond4: left allmulticast mode
[  133.970973][ T9736] bond4: left promiscuous mode
[  133.983247][ T9736] bridge0: port 3(bond4) entered disabled state
[  133.991384][ T9736] bridge_slave_1: left allmulticast mode
[  133.994236][ T9736] bridge_slave_1: left promiscuous mode
[  133.996984][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.002228][ T9736] bridge_slave_0: left allmulticast mode
[  134.007458][ T9736] bridge_slave_0: left promiscuous mode
[  134.010182][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.117454][ T5848] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.302203][ T9758] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  134.344188][ T9758] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.379790][ T9758] bond2: (slave gretap1): making interface the new active one
[  134.386171][ T9758] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  135.352493][ T9799] sctp: [Deprecated]: syz.2.1715 (pid 9799) Use of int in maxseg socket option.
[  135.352493][ T9799] Use struct sctp_assoc_value instead
[  137.586808][ T9879] netlink: 'syz.2.1752': attribute type 2 has an invalid length.
[  137.601928][ T9879] : entered promiscuous mode
[  137.807103][   T55] block nbd0: Receive control failed (result -104)
[  138.176067][ T9916] __nla_validate_parse: 2 callbacks suppressed
[  138.176080][ T9916] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1772'.
[  138.181718][ T9916] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  138.256139][ T9928] sch_fq: defrate 4294967295 ignored.
[  138.268038][ T9930] netlink: 'syz.0.1778': attribute type 10 has an invalid length.
[  138.277742][ T9930] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1778'.
[  138.303690][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.314840][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.593907][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.788058][ T9958] netlink: 'syz.2.1787': attribute type 13 has an invalid length.
[  138.791803][ T9958] netlink: 'syz.2.1787': attribute type 17 has an invalid length.
[  138.829891][ T9958] syz_tun: left promiscuous mode
[  138.842081][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.867115][ T9958] 8021q: adding VLAN 0 to HW filter on device team0
[  138.902984][ T9958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.988103][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'.
[  139.022555][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.134463][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.175710][ T9970] ieee802154 phy0 wpan0: encryption failed: -22
[  139.200990][ T9961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.387625][T10044] netlink: 'syz.0.1826': attribute type 3 has an invalid length.
[  140.390534][T10044] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1826'.
[  140.457313][T10050] syzkaller1: entered promiscuous mode
[  140.459759][T10050] syzkaller1: entered allmulticast mode
[  140.576040][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'.
[  140.790695][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1841'.
[  140.798682][T10076] netlink: 'syz.2.1842': attribute type 2 has an invalid length.
[  140.812348][T10074] tipc: New replicast peer: 255.255.255.255
[  140.823729][T10074] tipc: Enabled bearer <udp:syz2>, priority 10
[  140.832328][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'.
[  140.836998][T10074] tipc: Disabling bearer <udp:syz2>
[  141.078016][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'.
[  141.309857][T10115] netlink: 'syz.1.1853': attribute type 16 has an invalid length.
[  141.313417][T10115] netlink: 'syz.1.1853': attribute type 17 has an invalid length.
[  141.342896][T10115] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.346623][T10115] 8021q: adding VLAN 0 to HW filter on device team0
[  141.349649][T10115] tipc: Resetting bearer <eth:team0>
[  141.355078][T10115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.365005][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.370052][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.373581][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.719887][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'.
[  141.809116][T10151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1877'.
[  141.889475][T10154] tipc: New replicast peer: 255.255.255.255
[  141.904523][T10154] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.274117][ T5869] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  142.353625][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  142.924489][T10184] netlink: 'syz.2.1893': attribute type 1 has an invalid length.
[  142.937540][T10186] netlink: 'syz.0.1895': attribute type 3 has an invalid length.
[  143.047951][T10197] netlink: 'syz.2.1899': attribute type 5 has an invalid length.
[  143.052015][T10197] netlink: 'syz.2.1899': attribute type 6 has an invalid length.
[  143.586323][T10246] __nla_validate_parse: 3 callbacks suppressed
[  143.586336][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'.
[  143.622008][T10247] policy can only be matched on NF_INET_PRE_ROUTING
[  143.622033][T10247] unable to load match
[  143.781034][T10260] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  144.151923][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1945'.
[  144.162887][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'.
[  144.207054][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'.
[  144.340538][T10312] netlink: 'syz.2.1955': attribute type 4 has an invalid length.
[  144.377209][T10314] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1956'.
[  144.387137][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1957'.
[  144.403569][T10316] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.419225][T10316] syz_tun: entered promiscuous mode
[  144.421768][T10316] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  144.428860][T10316] bond3: (slave macvlan3): Enslaving as an active interface with an up link
[  144.498087][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'.
[  144.501006][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1961'.
[  144.504378][T10327] netlink: 'syz.1.1962': attribute type 7 has an invalid length.
[  144.504404][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1961'.
[  144.546487][T10329] tipc: New replicast peer: 255.255.255.255
[  144.548967][T10329] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.703001][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1972'.
[  145.152851][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  146.092312][T10464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.175177][T10471] macvlan4: entered allmulticast mode
[  146.177124][T10471] hsr0: entered allmulticast mode
[  146.178865][T10471] hsr_slave_0: entered allmulticast mode
[  146.180918][T10471] hsr_slave_1: entered allmulticast mode
[  146.195726][T10473] validate_nla: 2 callbacks suppressed
[  146.195798][T10473] netlink: 'syz.1.2026': attribute type 28 has an invalid length.
[  146.196295][T10471] hsr0: left allmulticast mode
[  146.204439][T10471] hsr_slave_0: left allmulticast mode
[  146.206513][T10471] hsr_slave_1: left allmulticast mode
[  146.377197][T10481] team0 (unregistering): Port device team_slave_0 removed
[  146.383058][T10481] team0 (unregistering): Port device team_slave_1 removed
[  146.388354][T10488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  146.390994][T10481] team0 (unregistering): Port device 0! removed
[  146.605292][T10507] netlink: 'syz.2.2043': attribute type 1 has an invalid length.
[  146.624485][T10509] netlink: 'syz.0.2044': attribute type 10 has an invalid length.
[  146.748539][T10521] @: renamed from veth0_vlan
[  146.953548][T10538] sctp: [Deprecated]: syz.0.2054 (pid 10538) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.953548][T10538] Use struct sctp_sack_info instead
[  147.152909][T10550] rdma_op ffff888031a8e9f0 conn xmit_rdma 0000000000000000
[  147.365463][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  148.504098][T10601] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  148.544823][T10601] bond4: (slave gretap2): making interface the new active one
[  148.547664][T10601] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  148.559692][T10601] vlan3: entered allmulticast mode
[  148.563761][T10601] bond4: entered allmulticast mode
[  148.566114][T10601] gretap2: entered allmulticast mode
[  148.569092][T10601] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  148.672614][T10616] __nla_validate_parse: 10 callbacks suppressed
[  148.675274][T10616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2090'.
[  148.819183][T10627] macsec1: entered promiscuous mode
[  148.821604][T10627] team0: entered promiscuous mode
[  148.827233][T10627] team_slave_1: entered promiscuous mode
[  148.875303][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'.
[  148.884279][T10633] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.887798][T10633] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.109866][T10653] netlink: 'syz.1.2107': attribute type 1 has an invalid length.
[  149.264772][T10663] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  149.269038][T10663] syzkaller0: entered promiscuous mode
[  149.271095][T10663] syzkaller0: entered allmulticast mode
[  149.846601][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'.
[  150.076705][T10698] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2129'.
[  150.553673][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'.
[  151.521457][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'.
[  151.525121][T10773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2164'.
[  151.675671][T10782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2167'.
[  151.679641][T10782] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2167'.
[  151.685314][T10782] netlink: 'syz.2.2167': attribute type 6 has an invalid length.
[  151.688765][T10782] netlink: 'syz.2.2167': attribute type 5 has an invalid length.
[  151.691542][T10782] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2167'.
[  152.207439][T10813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.335131][T10819] netlink: 'syz.0.2183': attribute type 83 has an invalid length.
[  152.515374][T10828] netlink: 'syz.0.2187': attribute type 15 has an invalid length.
[  152.519030][T10828] netlink: 'syz.0.2187': attribute type 18 has an invalid length.
[  152.673897][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  153.955126][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[  154.455951][T10954] netlink: 'syz.1.2245': attribute type 3 has an invalid length.
[  154.511192][T10958] netlink: 'syz.1.2247': attribute type 1 has an invalid length.
[  154.514205][T10958] __nla_validate_parse: 7 callbacks suppressed
[  154.514215][T10958] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2247'.
[  154.631596][T10966] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2251'.
[  154.770143][T10966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.777990][T10966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.781652][T10966] bond0 (unregistering): Released all slaves
[  154.794820][T10967] macsec0: entered promiscuous mode
[  154.881185][T10979] netlink: 'syz.1.2254': attribute type 3 has an invalid length.
[  155.008697][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'.
[  155.067731][T10993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.082279][T10993] syzkaller0: entered promiscuous mode
[  155.085390][T10993] syzkaller0: entered allmulticast mode
[  155.099457][T10993] tipc: Resetting bearer <eth:syzkaller0>
[  155.315688][T10992] tipc: Resetting bearer <eth:syzkaller0>
[  155.969109][T10992] tipc: Disabling bearer <eth:syzkaller0>
[  156.092364][T11013] bond3: (slave erspan0): Releasing active interface
[  156.101923][T11013] tipc: Resetting bearer <eth:team0>
[  156.107121][T11013] team_slave_0: left promiscuous mode
[  156.110764][T11013] team0: Port device team_slave_0 removed
[  156.114512][T11013] team_slave_1: left promiscuous mode
[  156.117760][T11013] team0: Port device team_slave_1 removed
[  156.120180][T11013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.124081][T11013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.132947][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.137039][T11013] bond3: (slave veth3): Releasing active interface
[  156.212124][T11013] team0: Mode changed to "activebackup"
[  156.353379][T11041] erspan0: left allmulticast mode
[  156.363225][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.364218][ T5848] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  156.388193][T11041] tipc: Resetting bearer <eth:team0>
[  156.421264][T11041] vlan0: left promiscuous mode
[  156.427063][T11041] macsec0: left promiscuous mode
[  156.429733][T11041] bond1: left promiscuous mode
[  156.431977][T11041] macsec1: left promiscuous mode
[  156.435050][T11041] macsec1: left allmulticast mode
[  156.438098][T11041] veth3: left promiscuous mode
[  156.513865][T11052] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2286'.
[  156.517105][T11052] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  156.519785][T11052] openvswitch: netlink: Message has 8454 unknown bytes.
[  156.732739][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'.
[  156.736058][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'.
[  156.739464][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'.
[  156.746504][T11077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'.
[  156.849880][T11080] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  157.619006][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'.
[  157.662963][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2306'.
[  158.044974][T11130] netlink: 'syz.0.2324': attribute type 10 has an invalid length.
[  158.050735][T11130] dummy0: entered promiscuous mode
[  158.060301][T11130] team0: Port device dummy0 added
[  158.066112][T11130] netlink: 'syz.0.2324': attribute type 10 has an invalid length.
[  158.072260][T11130] dummy0: left promiscuous mode
[  158.076374][T11130] team0: Port device dummy0 removed
[  158.082608][T11130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  158.151240][T11138] syzkaller1: entered promiscuous mode
[  158.153852][T11138] syzkaller1: entered allmulticast mode
[  158.870750][T11170] geneve2: entered allmulticast mode
[  158.960249][T11172] openvswitch: netlink: Key type 30 is not supported
[  159.373472][T11209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.641343][T11229] syzkaller0: entered promiscuous mode
[  159.643937][T11229] syzkaller0: entered allmulticast mode
[  161.050535][T11239] __nla_validate_parse: 3 callbacks suppressed
[  161.050552][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'.
[  161.070943][ T5848] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.078047][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'.
[  161.080182][ T5848] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.087997][ T5848] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.091944][ T5848] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.165954][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2378'.
[  161.340152][T11269] netlink: zone id is out of range
[  161.342045][T11269] netlink: zone id is out of range
[  161.344728][T11269] netlink: set zone limit has 4 unknown bytes
[  161.451676][T11283] netlink: 'syz.2.2395': attribute type 10 has an invalid length.
[  161.460977][T11283] netlink: 'syz.2.2395': attribute type 10 has an invalid length.
[  161.466701][T11283] !: entered promiscuous mode
[  161.469212][T11283] bond0: (slave 0!): Enslaving as an active interface with an up link
[  161.661365][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'.
[  161.877787][T11314] bridge_slave_0: default FDB implementation only supports local addresses
[  162.402329][T11332] netlink: 'syz.2.2416': attribute type 1 has an invalid length.
[  162.556415][   T33] audit: type=1804 audit(1754073993.423:5): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2419" name="/newroot/692/cgroup.controllers" dev="tmpfs" ino=3500 res=1 errno=0
[  162.577553][   T33] audit: type=1800 audit(1754073993.433:6): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2419" name="cgroup.controllers" dev="tmpfs" ino=3500 res=0 errno=0
[  162.591567][   T33] audit: type=1800 audit(1754073993.433:7): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2419" name="cgroup.controllers" dev="tmpfs" ino=3500 res=0 errno=0
[  162.654405][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'.
[  162.745630][T11359] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2427'.
[  162.831711][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'.
[  162.873599][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'.
[  162.881517][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'.
[  163.231718][T11403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2447'.
[  163.363959][T11410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.370458][T11410] tipc: Resetting bearer <eth:syzkaller0>
[  163.375671][T11409] tipc: Disabling bearer <eth:syzkaller0>
[  163.418002][T11416] pim6reg1: entered promiscuous mode
[  163.419827][T11416] pim6reg1: entered allmulticast mode
[  163.533920][T11422] smc: net device bond0 applied user defined pnetid SYZ2
[  163.580410][T11428] Unsupported ieee802154 address type: 0
[  163.729848][T11443] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  163.743680][T11443] netlink: 'syz.0.2465': attribute type 3 has an invalid length.
[  163.927074][T11452] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  164.195649][ T5209] Bluetooth: hci2: link tx timeout
[  164.197868][ T5209] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.201448][ T5209] Bluetooth: hci2: link tx timeout
[  164.204266][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.207650][ T5209] Bluetooth: hci2: link tx timeout
[  164.209439][ T5209] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.212127][ T5209] Bluetooth: hci2: link tx timeout
[  164.214005][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.219319][ T5209] Bluetooth: hci2: link tx timeout
[  164.221250][ T5209] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.224604][T11486] netlink: 'syz.0.2483': attribute type 8 has an invalid length.
[  164.226071][ T5209] Bluetooth: hci2: link tx timeout
[  164.229252][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.231901][ T5209] Bluetooth: hci2: link tx timeout
[  164.234164][ T5209] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.239006][ T5209] Bluetooth: hci2: link tx timeout
[  164.241215][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.245967][ T5209] Bluetooth: hci2: link tx timeout
[  164.248169][ T5209] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  164.250693][ T5209] Bluetooth: hci2: link tx timeout
[  164.252442][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.268030][T11486] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.271616][T11486] bond0: (slave bond6): Enslaving as an active interface with an up link
[  164.298686][T11491] batadv_slave_1: entered promiscuous mode
[  165.445015][T11527] !: left promiscuous mode
[  165.456928][T11527] veth0_to_team: left promiscuous mode
[  165.458762][T11527] veth0_to_team: left allmulticast mode
[  165.461056][T11527] batadv_slave_1: left promiscuous mode
[  165.466776][T11527] vxlan0: left promiscuous mode
[  165.468487][T11527] vxlan0: left allmulticast mode
[  165.470279][T11527] bridge2: left promiscuous mode
[  165.475040][T11527] vlan2: left allmulticast mode
[  165.477118][T11527] veth1: left allmulticast mode
[  165.507405][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.513800][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.527442][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.530477][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.735480][T11560] bond0: (slave dummy0): Releasing backup interface
[  165.746408][T11560] bridge_slave_0: left allmulticast mode
[  165.748402][T11560] bridge_slave_0: left promiscuous mode
[  165.750469][T11560] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.760697][T11560] bridge_slave_1: left allmulticast mode
[  165.766850][T11560] bridge_slave_1: left promiscuous mode
[  165.769511][T11560] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.776720][T11560] bond0: (slave bond_slave_0): Releasing backup interface
[  165.780744][T11560] bond0: (slave bond_slave_1): Releasing backup interface
[  165.792851][T11560] team_slave_1: left promiscuous mode
[  165.799429][T11560] team0: Port device team_slave_1 removed
[  165.807301][T11560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.810860][T11560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.824905][T11560] bond1: (slave macvlan2): Removing an active aggregator
[  165.833717][T11560] bond1: (slave macvlan2): Releasing backup interface
[  165.845436][T11560] bond2: (slave bridge1): Releasing active interface
[  165.851738][T11560] batman_adv: batadv0: Removing interface: macvtap1
[  165.860359][T11560] bond3: (slave bridge2): Releasing active interface
[  165.864061][T11560] bond3: (slave bridge2): the permanent HWaddr of slave - 36:7d:c3:bf:c2:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  165.871212][T11560] bond3: (slave gretap1): making interface the new active one
[  165.878769][T11560] bond3: (slave gretap1): Releasing active interface
[  165.899162][T11560] bond0: (slave bond6): Releasing backup interface
[  165.928012][T11580] gre1: entered promiscuous mode
[  165.930568][T11560] team0: Failed to send options change via netlink (err -105)
[  165.933897][T11560] team0: Mode changed to "activebackup"
[  166.110436][T11599] bond0: (slave syz_tun): Releasing backup interface
[  166.118727][T11599] bond0: (slave 0!): Releasing backup interface
[  166.125312][T11599] bridge_slave_0: left allmulticast mode
[  166.128993][T11599] bridge_slave_0: left promiscuous mode
[  166.131023][T11599] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.137558][T11599] bridge_slave_1: left allmulticast mode
[  166.147695][T11599] bridge_slave_1: left promiscuous mode
[  166.149752][T11599] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.156695][T11599] bond0: (slave bond_slave_0): Releasing backup interface
[  166.162375][T11599] bond0: (slave bond_slave_1): Releasing backup interface
[  166.178341][T11599] bond2: (slave gretap1): Releasing active interface
[  166.184776][T11599] bond3: (slave macvlan3): Releasing backup interface
[  166.190896][T11599] bond4: (slave gretap2): Releasing active interface
[  166.198402][T11599] gretap2: left allmulticast mode
[  166.274503][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[  166.345838][T11624] netlink: 'syz.1.2543': attribute type 10 has an invalid length.
[  166.354201][T11624] team0: Device dummy0 failed to register rx_handler
[  166.374021][T11624] netlink: 'syz.1.2543': attribute type 10 has an invalid length.
[  166.545840][T11640] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.549122][T11640] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.395792][T11656] netlink: 'syz.2.2555': attribute type 10 has an invalid length.
[  167.400002][T11656] netlink: 'syz.2.2555': attribute type 10 has an invalid length.
[  167.407358][T11656] bond0: (slave 0!): Enslaving as an active interface with an up link
[  167.549439][T11663] vlan3: entered promiscuous mode
[  167.562786][T11663] bond0: entered promiscuous mode
[  167.566595][T11663] !: entered promiscuous mode
[  167.997337][T11714] netlink: 'syz.2.2585': attribute type 6 has an invalid length.
[  168.029829][T11718] __nla_validate_parse: 10 callbacks suppressed
[  168.029843][T11718] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2587'.
[  168.069633][T11722] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2589'.
[  168.353798][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[  168.433580][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'.
[  168.695200][T11781] sctp: [Deprecated]: syz.1.2616 (pid 11781) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.695200][T11781] Use struct sctp_sack_info instead
[  169.088331][T11823] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  169.248422][T11837] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  169.277332][T11844] IPv6: sit2: Disabled Multicast RS
[  169.460695][T11862] wg1 speed is unknown, defaulting to 1000
[  169.467807][T11862] wg1 speed is unknown, defaulting to 1000
[  169.474346][T11862] wg1 speed is unknown, defaulting to 1000
[  169.630353][   T51] wg1 speed is unknown, defaulting to 1000
[  169.633874][T11862] infiniband syz1: set down
[  169.636931][T11862] infiniband syz1: added wg1
[  169.679319][T11862] RDS/IB: syz1: added
[  169.681976][T11862] smc: adding ib device syz1 with port count 1
[  169.686405][T11862] smc:    ib device syz1 port 1 has pnetid SYZ2 (user defined)
[  169.694856][   T10] wg1 speed is unknown, defaulting to 1000
[  169.697325][T11862] wg1 speed is unknown, defaulting to 1000
[  169.833835][T11862] wg1 speed is unknown, defaulting to 1000
[  169.835258][T11874] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  169.839758][T11874] syzkaller0: entered promiscuous mode
[  169.841755][T11874] syzkaller0: entered allmulticast mode
[  169.963009][T11862] wg1 speed is unknown, defaulting to 1000
[  170.037852][T11882] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  170.043014][T11880] netlink: 'syz.1.2664': attribute type 10 has an invalid length.
[  170.059872][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2664'.
[  170.081252][T11880] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2664'.
[  170.088655][T11880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.104999][T11880] netlink: 'syz.1.2664': attribute type 12 has an invalid length.
[  170.117725][T11880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2664'.
[  170.234161][T11896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.243985][T11896] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  170.249871][T11896] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  170.264998][T11896] sch_fq: defrate 257 ignored.
[  170.267815][T11896] tipc: Resetting bearer <eth:syzkaller0>
[  170.824196][T11942] macvtap1: entered promiscuous mode
[  170.826690][T11942] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  170.832248][T11942] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  171.472500][T11974] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2708'.
[  171.485141][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2707'.
[  171.489077][T11975] netlink: 'syz.2.2707': attribute type 7 has an invalid length.
[  171.493914][T11975] netlink: 'syz.2.2707': attribute type 8 has an invalid length.
[  171.501816][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'.
[  171.716896][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  171.720873][T11998] netlink: 'syz.2.2716': attribute type 5 has an invalid length.
[  171.735802][T11998] geneve3: entered promiscuous mode
[  171.738283][T11998] geneve3: entered allmulticast mode
[  171.741721][ T5848] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  171.753000][ T5848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  171.757187][ T5848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  171.771169][ T5848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  172.950331][T12060] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  173.165212][T12078] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  173.186708][T12078] bond5: entered promiscuous mode
[  173.188830][T12078] 8021q: adding VLAN 0 to HW filter on device bond5
[  173.198929][T12078] __nla_validate_parse: 4 callbacks suppressed
[  173.198940][T12078] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2750'.
[  173.209069][T12078] batadv0: entered promiscuous mode
[  173.211113][T12078] batadv0: entered allmulticast mode
[  173.218222][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.219081][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'.
[  173.223426][T12078] bond5: (slave batadv0): making interface the new active one
[  173.227342][T12078] bond5: (slave batadv0): Enslaving as an active interface with an up link
[  173.247796][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'.
[  173.381104][T12078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2750'.
[  173.607460][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2760'.
[  173.695478][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'.
[  173.713345][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2767'.
[  173.715314][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'.
[  173.729902][T12113] bridge6: entered promiscuous mode
[  173.731844][T12113] macsec2: entered promiscuous mode
[  173.736210][T12113] macsec2: entered allmulticast mode
[  173.738291][T12113] bridge6: entered allmulticast mode
[  173.742112][T12113] bridge6: port 1(macsec2) entered blocking state
[  173.747992][T12113] bridge6: port 1(macsec2) entered disabled state
[  173.753273][T12113] bridge6: left allmulticast mode
[  173.755666][T12113] bridge6: left promiscuous mode
[  173.790219][T12120] syzkaller1: entered promiscuous mode
[  173.794330][T12120] syzkaller1: entered allmulticast mode
[  173.875716][T12126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.107655][T12158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.111563][T12160] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2788'.
[  174.117609][T12160] gretap0: entered promiscuous mode
[  174.121089][T12160] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2788'.
[  174.124788][T12160] 0{X: renamed from gretap0
[  174.127841][T12160] 0{X: left promiscuous mode
[  174.129833][T12160] 0{X: entered allmulticast mode
[  174.138626][T12160] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  174.466440][T12195] wg1 speed is unknown, defaulting to 1000
[  174.526095][T12198] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  175.035534][T12225] gretap0: entered promiscuous mode
[  175.038589][T12225] 0{X: renamed from gretap0
[  175.044052][T12225] 0{X: left promiscuous mode
[  175.046270][T12225] 0{X: entered allmulticast mode
[  175.049954][T12225] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  175.106044][T12232] netlink: 'syz.2.2822': attribute type 6 has an invalid length.
[  175.396269][T12249] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  175.572254][T12267] raw_sendmsg: syz.1.2838 forgot to set AF_INET. Fix it!
[  175.640592][T12270] tun0: tun_chr_ioctl cmd 2147767520
[  175.689589][T12274] netlink: 'syz.0.2841': attribute type 23 has an invalid length.
[  176.859686][T12304] netlink: 'syz.0.2852': attribute type 21 has an invalid length.
[  176.931843][T12308] netlink: 'syz.0.2854': attribute type 39 has an invalid length.
[  177.393457][T12352] wg1 speed is unknown, defaulting to 1000
[  177.590666][   T51] IPVS: starting estimator thread 0...
[  177.684037][T12366] IPVS: using max 77 ests per chain, 184800 per kthread
[  177.744920][T12376] sctp: [Deprecated]: syz.0.2885 (pid 12376) Use of int in max_burst socket option deprecated.
[  177.744920][T12376] Use struct sctp_assoc_value instead
[  177.865412][T12382] netlink: 'syz.1.2888': attribute type 3 has an invalid length.
[  177.944327][ T5848] IPVS: stop unused estimator thread 0...
[  178.702717][T12424] __nla_validate_parse: 15 callbacks suppressed
[  178.702736][T12424] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2906'.
[  178.904237][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'.
[  179.054536][T12451] netlink: 'syz.2.2917': attribute type 1 has an invalid length.
[  179.221033][T12460] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2921'.
[  179.257680][T12460] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  179.280358][T12460] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  179.478624][T12477] netlink: 'syz.1.2929': attribute type 3 has an invalid length.
[  179.482112][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'.
[  179.678194][T12491] vti0: entered promiscuous mode
[  179.681187][T12491] vti0: entered allmulticast mode
[  180.282332][T12530] v: renamed from ip6_vti0
[  180.395153][T12534] netlink: 'syz.1.2956': attribute type 23 has an invalid length.
[  180.746816][T12544] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  180.750867][T12544] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  181.141569][T12563] 0{X: left allmulticast mode
[  181.148659][T12563] gre1: left promiscuous mode
[  181.160120][T12563] geneve3: left promiscuous mode
[  181.162929][T12563] geneve3: left allmulticast mode
[  181.174508][T12563] bond5: left promiscuous mode
[  181.180447][T12563] batadv0: left promiscuous mode
[  181.185179][T12563] batadv0: left allmulticast mode
[  181.208061][T12563] vti0: left promiscuous mode
[  181.210110][T12563] vti0: left allmulticast mode
[  181.224159][ T5848] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  181.227001][ T5848] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  181.229912][ T5848] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  181.240516][ T5848] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  181.262830][T12568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2972'.
[  182.070928][T12596] Bluetooth: MGMT ver 1.23
[  182.558803][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3003'.
[  182.619599][T12637] wg1 speed is unknown, defaulting to 1000
[  183.062478][T12662] netlink: 'syz.0.3011': attribute type 10 has an invalid length.
[  183.071045][T12662] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  183.080018][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3011'.
[  183.083001][T12664] sctp: [Deprecated]: syz.2.3010 (pid 12664) Use of int in max_burst socket option.
[  183.083001][T12664] Use struct sctp_assoc_value instead
[  183.099449][T12662] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3011'.
[  183.103481][T12662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.108785][T12662] netlink: 'syz.0.3011': attribute type 12 has an invalid length.
[  183.111316][T12662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3011'.
[  183.434026][T12683] netlink: 'syz.1.3016': attribute type 2 has an invalid length.
[  183.595091][T12689] netlink: 'syz.1.3019': attribute type 3 has an invalid length.
[  183.598178][T12689] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3019'.
[  184.022111][T12719] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3031'.
[  184.086259][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'.
[  184.092972][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'.
[  184.112845][T11488] Bluetooth: hci2: command 0x0405 tx timeout
[  184.117819][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  184.617310][T12763] openvswitch: netlink: Flow actions attr not present in new flow.
[  185.105123][T12777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3057'.
[  185.549647][T12784] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  185.729109][T12790] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.730129][T12792] netlink: 'syz.2.3064': attribute type 1 has an invalid length.
[  185.749047][T12792] bond6: entered promiscuous mode
[  185.751057][T12792] bond6: entered allmulticast mode
[  185.764130][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'.
[  185.771545][T12792] bridge8: the hash_elasticity option has been deprecated and is always 16
[  185.869903][T12801] netlink: 'syz.0.3068': attribute type 4 has an invalid length.
[  185.881458][T12801] netlink: 'syz.0.3068': attribute type 4 has an invalid length.
[  186.088090][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'.
[  186.112829][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.367357][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'.
[  186.496617][T12841] netlink: 'syz.0.3086': attribute type 10 has an invalid length.
[  186.499791][T12841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3086'.
[  186.504705][T12841] dummy0: entered promiscuous mode
[  186.506738][T12841] dummy0: entered allmulticast mode
[  186.511543][T12841] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  187.044539][T12827] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  187.110150][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'.
[  187.181184][T12867] smc: net device bond0 erased user defined pnetid SYZ2
[  187.186797][T12867] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2
[  187.365508][T12867] smc: removing net device bond0 with user defined pnetid SYZ2
[  187.370538][T12867] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  187.378111][T12867] bond0 (unregistering): Released all slaves
[  187.535284][T12883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3104'.
[  187.646125][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.662195][T12893] netlink: 'syz.1.3108': attribute type 14 has an invalid length.
[  187.669113][T12893] netlink: 'syz.1.3108': attribute type 14 has an invalid length.
[  187.702184][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.453365][T12940] netlink: 'syz.0.3129': attribute type 10 has an invalid length.
[  189.254233][T12982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.500585][T12993] __nla_validate_parse: 6 callbacks suppressed
[  189.500606][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'.
[  189.554610][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  190.117405][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'.
[  190.417158][T13069] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3189'.
[  190.484417][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'.
[  190.738525][T13097] netlink: 'syz.2.3202': attribute type 3 has an invalid length.
[  191.079075][T13120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3213'.
[  191.140671][T13124] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3215'.
[  191.495542][T13145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.552455][T13145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.674057][T13158] sctp: [Deprecated]: syz.2.3230 (pid 13158) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.674057][T13158] Use struct sctp_sack_info instead
[  191.929160][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'.
[  192.048852][T13175] wg1 speed is unknown, defaulting to 1000
[  193.423362][T13208] pim6reg1: entered promiscuous mode
[  193.426087][T13208] pim6reg1: entered allmulticast mode
[  193.711144][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3252'.
[  193.715922][T13227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3252'.
[  194.287422][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.290985][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.347001][T13260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.695236][T13275] wg1 speed is unknown, defaulting to 1000
[  195.024776][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3276'.
[  195.706511][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3302'.
[  195.710365][T13337] netlink: 'syz.2.3302': attribute type 1 has an invalid length.
[  195.790558][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'.
[  195.851615][T13356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3309'.
[  195.856694][T13356] netlink: 'syz.1.3309': attribute type 1 has an invalid length.
[  195.906104][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3312'.
[  195.925255][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3312'.
[  196.045111][T13374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.311130][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.712930][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3344'.
[  196.858626][T13441] sctp: [Deprecated]: syz.1.3348 (pid 13441) Use of int in max_burst socket option deprecated.
[  196.858626][T13441] Use struct sctp_assoc_value instead
[  196.974609][T13449] openvswitch: netlink: Flow key attribute not present in set flow.
[  197.128983][T13462] netlink: 'syz.2.3359': attribute type 9 has an invalid length.
[  197.136898][T13462] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.3359'.
[  197.168630][T13464] netlink: 'syz.2.3360': attribute type 1 has an invalid length.
[  198.060267][T13486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3365'.
[  198.129173][T13489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3368'.
[  198.309356][T13503] team0: Mode "" not found
[  198.427964][T13510] 0{X: entered promiscuous mode
[  198.436407][T13510] 0{X: left promiscuous mode
[  198.542873][T13516] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  199.159323][T13554] unsupported nla_type 52263
[  199.441919][T13571] wg1 speed is unknown, defaulting to 1000
[  200.590408][T13607] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  200.608276][T13607] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  200.611600][T13607] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  201.022872][T13628] bridge0: entered promiscuous mode
[  201.025158][T13628] vlan3: entered promiscuous mode
[  201.177889][T13633] __nla_validate_parse: 9 callbacks suppressed
[  201.177905][T13633] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3431'.
[  201.244656][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'.
[  201.420081][T13646] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3435'.
[  201.792923][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  202.090162][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'.
[  202.258517][T13707] netem: change failed
[  204.053085][T13738] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  204.057157][T13738] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  204.322110][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3491'.
[  204.406819][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3494'.
[  204.810468][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'.
[  204.880049][T13813] netlink: 'syz.1.3517': attribute type 3 has an invalid length.
[  204.884012][T13813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.941450][T13819] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3520'.
[  205.067863][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'.
[  205.179481][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'.
[  205.181246][T13840] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.187707][T13840] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.637536][T13871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.068460][T13905] __nla_validate_parse: 1 callbacks suppressed
[  207.068484][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3560'.
[  207.231504][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'.
[  207.240577][T13909] netlink: 'syz.0.3562': attribute type 16 has an invalid length.
[  207.244382][T13909] netlink: 'syz.0.3562': attribute type 3 has an invalid length.
[  207.247878][T13909] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.3562'.
[  207.261316][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3562'.
[  207.348232][T13918] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  207.440558][T13924] IPv6: NLM_F_REPLACE set, but no existing node found!
[  207.440702][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'.
[  207.502300][T13931] netlink: 'syz.2.3569': attribute type 32 has an invalid length.
[  207.531229][T13933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3570'.
[  207.816710][T13955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.820204][T13955] syzkaller0: entered promiscuous mode
[  207.825551][T13955] syzkaller0: entered allmulticast mode
[  207.849262][T13955] tipc: Resetting bearer <eth:syzkaller0>
[  207.854504][T13954] tipc: Resetting bearer <eth:syzkaller0>
[  207.879418][T13954] tipc: Disabling bearer <eth:syzkaller0>
[  208.004877][T13965] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  208.091058][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'.
[  208.431706][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'.
[  208.465392][T14004] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3602'.
[  209.515477][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'.
[  209.518610][T14033] netlink: 'syz.2.3615': attribute type 20 has an invalid length.
[  209.521690][T14033] netlink: 'syz.2.3615': attribute type 21 has an invalid length.
[  209.797459][T14048] netlink: 'syz.1.3621': attribute type 1 has an invalid length.
[  209.811951][T14048] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.849856][T14048] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.856754][T14048] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  209.871774][T14048] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  209.903501][T14053] batadv_slave_1: entered promiscuous mode
[  209.907398][T14053] bond0: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  209.921855][T14053] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.205043][T14073] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  210.222991][T14073] syzkaller0: entered promiscuous mode
[  210.233371][T14073] syzkaller0: entered allmulticast mode
[  210.520850][T14107] netlink: 'syz.0.3649': attribute type 8 has an invalid length.
[  210.739825][T14130] netlink: 'syz.0.3661': attribute type 6 has an invalid length.
[  211.782336][T14179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.176681][T14217] __nla_validate_parse: 33 callbacks suppressed
[  212.176694][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'.
[  212.189911][T14214] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  212.345743][T14237] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.3704'.
[  212.441228][T14242] IPVS: Scheduler module ip_vs_sip not found
[  212.446861][T14242] IPVS: length: 8 != 446622349272
[  213.998923][T14287] netlink: 'syz.1.3724': attribute type 4 has an invalid length.
[  214.008277][T14287] netlink: 'syz.1.3724': attribute type 4 has an invalid length.
[  214.594153][   T10] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec
[  214.769849][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'.
[  215.188540][T14348] wg1 speed is unknown, defaulting to 1000
[  215.341847][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'.
[  215.445295][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.570979][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'.
[  216.647458][T14420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.427992][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'.
[  217.803583][T14511] GUP no longer grows the stack in syz.2.3824 (14511): 200000002000-20000000a000 (200000001000)
[  217.808441][T14511] CPU: 0 UID: 0 PID: 14511 Comm: syz.2.3824 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  217.808457][T14511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.808462][T14511] Call Trace:
[  217.808466][T14511]  <TASK>
[  217.808472][T14511]  dump_stack_lvl+0x189/0x250
[  217.808488][T14511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.808497][T14511]  ? __pfx__printk+0x10/0x10
[  217.808507][T14511]  ? find_vma+0xe7/0x160
[  217.808527][T14511]  __get_user_pages+0x2a60/0x30b0
[  217.808554][T14511]  ? __pfx___get_user_pages+0x10/0x10
[  217.808570][T14511]  __gup_longterm_locked+0xd66/0x15b0
[  217.808584][T14511]  ? try_grab_folio_fast+0x35b/0x4f0
[  217.808599][T14511]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  217.808613][T14511]  gup_fast_fallback+0x1cd4/0x2260
[  217.808626][T14511]  ? is_bpf_text_address+0x26/0x2b0
[  217.808652][T14511]  ? __pfx_gup_fast_fallback+0x10/0x10
[  217.808661][T14511]  ? stack_trace_save+0x9c/0xe0
[  217.808697][T14511]  ? stack_depot_save_flags+0x40/0x900
[  217.808710][T14511]  ? pin_user_pages_fast+0x4d/0xb0
[  217.808723][T14511]  iov_iter_extract_pages+0x35a/0x5e0
[  217.808739][T14511]  extract_iter_to_sg+0xe46/0x24e0
[  217.808756][T14511]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  217.808774][T14511]  ? __asan_memset+0x22/0x50
[  217.808786][T14511]  af_alg_get_rsgl+0x436/0x810
[  217.808805][T14511]  aead_recvmsg+0x4cc/0x13f0
[  217.808841][T14511]  ? __pfx_aead_recvmsg+0x10/0x10
[  217.808849][T14511]  ? __schedule+0x1755/0x4d30
[  217.808861][T14511]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  217.808874][T14511]  ? __pfx_aead_recvmsg+0x10/0x10
[  217.808884][T14511]  sock_recvmsg_nosec+0x186/0x1c0
[  217.808900][T14511]  ____sys_recvmsg+0x3aa/0x460
[  217.808914][T14511]  ? __pfx_____sys_recvmsg+0x10/0x10
[  217.808930][T14511]  ? import_iovec+0x74/0xa0
[  217.808944][T14511]  ___sys_recvmsg+0x1b5/0x510
[  217.808956][T14511]  ? __pfx____sys_recvmsg+0x10/0x10
[  217.808980][T14511]  ? __might_fault+0xb0/0x130
[  217.808992][T14511]  do_recvmmsg+0x307/0x770
[  217.809004][T14511]  ? __pfx_do_recvmmsg+0x10/0x10
[  217.809011][T14511]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  217.809029][T14511]  ? __pfx_do_futex+0x10/0x10
[  217.809045][T14511]  __x64_sys_recvmmsg+0x190/0x240
[  217.809057][T14511]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  217.809066][T14511]  ? rcu_is_watching+0x15/0xb0
[  217.809083][T14511]  ? do_syscall_64+0xbe/0x3b0
[  217.809096][T14511]  do_syscall_64+0xfa/0x3b0
[  217.809106][T14511]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.809116][T14511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.809124][T14511]  ? exc_page_fault+0x9f/0xf0
[  217.809134][T14511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.809142][T14511] RIP: 0033:0x7fec7018eb69
[  217.809150][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.809157][T14511] RSP: 002b:00007fec710c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  217.809167][T14511] RAX: ffffffffffffffda RBX: 00007fec703b5fa0 RCX: 00007fec7018eb69
[  217.809173][T14511] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  217.809178][T14511] RBP: 00007fec70211df1 R08: 0000000000000000 R09: 0000000000000000
[  217.809182][T14511] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  217.809187][T14511] R13: 0000000000000000 R14: 00007fec703b5fa0 R15: 00007ffde7126958
[  217.809199][T14511]  </TASK>
[  217.980925][   T33] audit: type=1804 audit(1754074048.843:8): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3824" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=6739 res=1 errno=0
[  217.990109][   T33] audit: type=1800 audit(1754074048.863:9): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3824" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=6739 res=0 errno=0
[  218.028534][T14524] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3828'.
[  218.117387][T14533] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  218.120350][T14533] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3832'.
[  218.195886][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3835'.
[  218.317066][T14553] wg1 speed is unknown, defaulting to 1000
[  218.598394][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'.
[  218.638168][T14583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3853'.
[  218.641833][T14583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3853'.
[  218.692539][T14588] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  218.695501][T14588] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  219.198328][T14602] netlink: 'syz.2.3860': attribute type 1 has an invalid length.
[  219.473099][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  220.158996][T14646] netem: change failed
[  220.205190][T14649] syz_tun: entered allmulticast mode
[  220.208109][T14647] syz_tun: left allmulticast mode
[  220.392095][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'.
[  220.399080][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'.
[  220.408870][T14661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.454886][T14665] netlink: 'syz.2.3890': attribute type 1 has an invalid length.
[  220.460369][T14665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3890'.
[  221.273839][T14712] netlink: 'syz.1.3912': attribute type 1 has an invalid length.
[  221.509539][T14735] dvmrp1: tun_chr_ioctl cmd 1074025677
[  221.512148][T14735] dvmrp1: linktype set to 773
[  221.657101][T14750] netlink: 'syz.0.3925': attribute type 7 has an invalid length.
[  221.747116][T14762] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  221.749835][T14762] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  221.752146][T14762] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  221.967758][T14788] netlink: 'syz.0.3939': attribute type 39 has an invalid length.
[  222.137480][T14800] syzkaller1: entered promiscuous mode
[  222.140055][T14800] syzkaller1: entered allmulticast mode
[  222.771922][T14805] ==================================================================
[  222.775312][T14805] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  222.778724][T14805] Read of size 2 at addr ffff888120414ec2 by task syz.0.3945/14805
[  222.783503][T14805] 
[  222.784586][T14805] CPU: 1 UID: 0 PID: 14805 Comm: syz.0.3945 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  222.784604][T14805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.784616][T14805] Call Trace:
[  222.784624][T14805]  <TASK>
[  222.784657][T14805]  dump_stack_lvl+0x189/0x250
[  222.784679][T14805]  ? __kasan_check_byte+0x12/0x40
[  222.784703][T14805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.784717][T14805]  ? lock_release+0x4b/0x3e0
[  222.784741][T14805]  ? __virt_addr_valid+0x4a5/0x5c0
[  222.784761][T14805]  print_report+0xca/0x240
[  222.784782][T14805]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  222.784796][T14805]  kasan_report+0x118/0x150
[  222.784815][T14805]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  222.784830][T14805]  __xfrm_state_lookup+0x6ad/0x8d0
[  222.784845][T14805]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  222.784862][T14805]  xfrm_state_add+0x27d/0xc40
[  222.784881][T14805]  pfkey_add+0x1edd/0x2e00
[  222.784900][T14805]  ? __pfx_pfkey_add+0x10/0x10
[  222.784910][T14805]  ? kmem_cache_free+0x18f/0x400
[  222.784933][T14805]  pfkey_sendmsg+0xbfe/0x1090
[  222.784950][T14805]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  222.784969][T14805]  ? aa_sock_msg_perm+0x94/0x160
[  222.784987][T14805]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.785002][T14805]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  222.785013][T14805]  __sock_sendmsg+0x21c/0x270
[  222.785031][T14805]  ____sys_sendmsg+0x505/0x830
[  222.785046][T14805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.785061][T14805]  ? import_iovec+0x74/0xa0
[  222.785082][T14805]  ___sys_sendmsg+0x21f/0x2a0
[  222.785098][T14805]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.785125][T14805]  ? __fget_files+0x2a/0x420
[  222.785139][T14805]  ? __fget_files+0x3a0/0x420
[  222.785153][T14805]  __x64_sys_sendmsg+0x19b/0x260
[  222.785167][T14805]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.785184][T14805]  ? rcu_is_watching+0x15/0xb0
[  222.785205][T14805]  ? do_syscall_64+0xbe/0x3b0
[  222.785225][T14805]  do_syscall_64+0xfa/0x3b0
[  222.785244][T14805]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.785260][T14805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.785273][T14805]  ? exc_page_fault+0x9f/0xf0
[  222.785290][T14805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.785302][T14805] RIP: 0033:0x7f96d518eb69
[  222.785316][T14805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.785327][T14805] RSP: 002b:00007f96d5f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.785342][T14805] RAX: ffffffffffffffda RBX: 00007f96d53b5fa0 RCX: 00007f96d518eb69
[  222.785352][T14805] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006
[  222.785360][T14805] RBP: 00007f96d5211df1 R08: 0000000000000000 R09: 0000000000000000
[  222.785368][T14805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.785376][T14805] R13: 0000000000000000 R14: 00007f96d53b5fa0 R15: 00007ffca39e8828
[  222.785391][T14805]  </TASK>
[  222.785396][T14805] 
[  222.867552][T14807] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  222.869750][T14805] Allocated by task 8374:
[  222.869768][T14805]  kasan_save_track+0x3e/0x80
[  222.916971][T14805]  __kasan_slab_alloc+0x6c/0x80
[  222.919293][T14805]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  222.921874][T14805]  xfrm_state_alloc+0x24/0x2f0
[  222.923926][T14805]  __find_acq_core+0x8a7/0x1c00
[  222.925973][T14805]  xfrm_find_acq+0x78/0xa0
[  222.927882][T14805]  xfrm_alloc_userspi+0x6b3/0xc90
[  222.929948][T14805]  xfrm_user_rcv_msg+0x7a3/0xab0
[  222.931989][T14805]  netlink_rcv_skb+0x208/0x470
[  222.933986][T14805]  xfrm_netlink_rcv+0x79/0x90
[  222.935947][T14805]  netlink_unicast+0x82f/0x9e0
[  222.937940][T14805]  netlink_sendmsg+0x805/0xb30
[  222.939968][T14805]  __sock_sendmsg+0x21c/0x270
[  222.941962][T14805]  ____sys_sendmsg+0x505/0x830
[  222.944086][T14805]  ___sys_sendmsg+0x21f/0x2a0
[  222.946143][T14805]  __x64_sys_sendmsg+0x19b/0x260
[  222.948267][T14805]  do_syscall_64+0xfa/0x3b0
[  222.950170][T14805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.952707][T14805] 
[  222.953726][T14805] Freed by task 5849:
[  222.955384][T14805]  kasan_save_track+0x3e/0x80
[  222.957330][T14805]  kasan_save_free_info+0x46/0x50
[  222.959408][T14805]  __kasan_slab_free+0x62/0x70
[  222.961354][T14805]  kmem_cache_free+0x18f/0x400
[  222.963429][T14805]  xfrm_state_gc_task+0x518/0x6a0
[  222.965713][T14805]  process_scheduled_works+0xae1/0x17b0
[  222.968255][T14805]  worker_thread+0x8a0/0xda0
[  222.970426][T14805]  kthread+0x711/0x8a0
[  222.972098][T14805]  ret_from_fork+0x3fc/0x770
[  222.974050][T14805]  ret_from_fork_asm+0x1a/0x30
[  222.976075][T14805] 
[  222.977099][T14805] The buggy address belongs to the object at ffff888120414d80
[  222.977099][T14805]  which belongs to the cache xfrm_state of size 928
[  222.982651][T14805] The buggy address is located 322 bytes inside of
[  222.982651][T14805]  freed 928-byte region [ffff888120414d80, ffff888120415120)
[  222.988164][T14805] 
[  222.989266][T14805] The buggy address belongs to the physical page:
[  222.992250][T14805] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120414
[  222.996095][T14805] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  222.999596][T14805] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  223.002762][T14805] page_type: f5(slab)
[  223.004428][T14805] raw: 057ff00000000040 ffff888104a74c80 dead000000000122 0000000000000000
[  223.007927][T14805] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  223.011526][T14805] head: 057ff00000000040 ffff888104a74c80 dead000000000122 0000000000000000
[  223.015268][T14805] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  223.018879][T14805] head: 057ff00000000002 ffffea0004810501 00000000ffffffff 00000000ffffffff
[  223.022402][T14805] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  223.025950][T14805] page dumped because: kasan: bad access detected
[  223.028944][T14805] page_owner tracks the page as allocated
[  223.031696][T14805] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5945, tgid 5941 (syz.1.30), ts 67193598869, free_ts 67144143552
[  223.039295][T14805]  post_alloc_hook+0x240/0x2a0
[  223.041289][T14805]  get_page_from_freelist+0x21e4/0x22c0
[  223.043549][T14805]  __alloc_frozen_pages_noprof+0x181/0x370
[  223.046037][T14805]  alloc_pages_mpol+0x232/0x4a0
[  223.048136][T14805]  allocate_slab+0x8a/0x3b0
[  223.050089][T14805]  ___slab_alloc+0xbfc/0x1480
[  223.052135][T14805]  kmem_cache_alloc_noprof+0x283/0x3c0
[  223.054433][T14805]  xfrm_state_alloc+0x24/0x2f0
[  223.056594][T14805]  xfrm_add_sa+0x17d1/0x4070
[  223.058712][T14805]  xfrm_user_rcv_msg+0x7a3/0xab0
[  223.060802][T14805]  netlink_rcv_skb+0x208/0x470
[  223.062809][T14805]  xfrm_netlink_rcv+0x79/0x90
[  223.064796][T14805]  netlink_unicast+0x82f/0x9e0
[  223.066804][T14805]  netlink_sendmsg+0x805/0xb30
[  223.068869][T14805]  __sock_sendmsg+0x21c/0x270
[  223.070877][T14805]  ____sys_sendmsg+0x505/0x830
[  223.072937][T14805] page last free pid 5931 tgid 5931 stack trace:
[  223.075614][T14805]  __free_frozen_pages+0xc71/0xe70
[  223.077811][T14805]  __folio_put+0x21b/0x2c0
[  223.079714][T14805]  free_large_kmalloc+0x145/0x200
[  223.081913][T14805]  device_release+0x9c/0x1c0
[  223.083879][T14805]  kobject_put+0x22b/0x480
[  223.085709][T14805]  netdev_run_todo+0xd2e/0xea0
[  223.087711][T14805]  tun_chr_close+0x13c/0x1c0
[  223.089651][T14805]  __fput+0x44c/0xa70
[  223.091283][T14805]  task_work_run+0x1d4/0x260
[  223.093177][T14805]  exit_to_user_mode_loop+0xec/0x110
[  223.095375][T14805]  do_syscall_64+0x2bd/0x3b0
[  223.097411][T14805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.100040][T14805] 
[  223.101153][T14805] Memory state around the buggy address:
[  223.103669][T14805]  ffff888120414d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.107087][T14805]  ffff888120414e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.110343][T14805] >ffff888120414e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.113602][T14805]                                            ^
[  223.116114][T14805]  ffff888120414f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.119547][T14805]  ffff888120414f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  223.123227][T14805] ==================================================================
[  223.127512][T14805] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  223.130939][T14805] CPU: 1 UID: 0 PID: 14805 Comm: syz.0.3945 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  223.135911][T14805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.139763][T14805] Call Trace:
[  223.141168][T14805]  <TASK>
[  223.142452][T14805]  dump_stack_lvl+0x99/0x250
[  223.144478][T14805]  ? __asan_memcpy+0x40/0x70
[  223.146535][T14805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.148967][T14805]  ? __pfx__printk+0x10/0x10
[  223.151173][T14805]  panic+0x2db/0x790
[  223.153097][T14805]  ? __pfx_panic+0x10/0x10
[  223.154955][T14805]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  223.157464][T14805]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  223.159992][T14805]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.162673][T14805]  ? print_memory_metadata+0x314/0x400
[  223.164982][T14805]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  223.167315][T14805]  check_panic_on_warn+0x89/0xb0
[  223.169661][T14805]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  223.171982][T14805]  end_report+0x78/0x160
[  223.173834][T14805]  kasan_report+0x129/0x150
[  223.175767][T14805]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  223.178084][T14805]  __xfrm_state_lookup+0x6ad/0x8d0
[  223.180298][T14805]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  223.182607][T14805]  xfrm_state_add+0x27d/0xc40
[  223.184604][T14805]  pfkey_add+0x1edd/0x2e00
[  223.186542][T14805]  ? __pfx_pfkey_add+0x10/0x10
[  223.188618][T14805]  ? kmem_cache_free+0x18f/0x400
[  223.191249][T14805]  pfkey_sendmsg+0xbfe/0x1090
[  223.193817][T14805]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  223.195951][T14805]  ? aa_sock_msg_perm+0x94/0x160
[  223.198029][T14805]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.200212][T14805]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  223.202379][T14805]  __sock_sendmsg+0x21c/0x270
[  223.204558][T14805]  ____sys_sendmsg+0x505/0x830
[  223.206668][T14805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.209016][T14805]  ? import_iovec+0x74/0xa0
[  223.211054][T14805]  ___sys_sendmsg+0x21f/0x2a0
[  223.213058][T14805]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.215048][T14805]  ? __fget_files+0x2a/0x420
[  223.217292][T14805]  ? __fget_files+0x3a0/0x420
[  223.219492][T14805]  __x64_sys_sendmsg+0x19b/0x260
[  223.221816][T14805]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.224206][T14805]  ? rcu_is_watching+0x15/0xb0
[  223.226554][T14805]  ? do_syscall_64+0xbe/0x3b0
[  223.228657][T14805]  do_syscall_64+0xfa/0x3b0
[  223.230824][T14805]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.233326][T14805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.235852][T14805]  ? exc_page_fault+0x9f/0xf0
[  223.237506][T14805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.239704][T14805] RIP: 0033:0x7f96d518eb69
[  223.241201][T14805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.247387][T14805] RSP: 002b:00007f96d5f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.250183][T14805] RAX: ffffffffffffffda RBX: 00007f96d53b5fa0 RCX: 00007f96d518eb69
[  223.252819][T14805] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006
[  223.255929][T14805] RBP: 00007f96d5211df1 R08: 0000000000000000 R09: 0000000000000000
[  223.259084][T14805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.261919][T14805] R13: 0000000000000000 R14: 00007f96d53b5fa0 R15: 00007ffca39e8828
[  223.265048][T14805]  </TASK>
[  223.267155][T14805] Kernel Offset: disabled
[  223.269150][T14805] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:47:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffc90006077310 RCX=0ea290fe8db1a100 RDX=dffffc0000000000
RSI=ffffffff8164d69a RDI=ffffc900060772c8 RBP=dffffc0000000000 RSP=ffffc900060771f8
R8 =ffffc90006077390 R9 =000000000000000a R10=ffffc90006077318 R11=ffffffff81ac3450
R12=ffff888020058000 R13=1ffff92000c0eedc R14=ffffc900060772c8 R15=ffffc900060772c8
RIP=ffffffff8172cc86 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fec710c16c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000028dc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fec70212e17
XMM06=0000000000000000 00007fec70212e11 XMM07=0000000000000000 00007fec70212e25
XMM08=0000000000000000 00007fec70212eab XMM09=0000000000000000 00007fec70212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000119b RDI=000000000000119c RBP=00000000000003f8 RSP=ffffc900040eed90
R8 =ffff8881068d0237 R9 =1ffff11020d1a046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591a R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f96d5f6e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010b77a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f96d5eed100 00007f96d5387460 XMM05=00007f96d5387478 00007f96d53874c0
XMM06=00007f96d53874b8 00007f96d53874b0 XMM07=00007f96d53874a8 00007f96d53874a0
XMM08=0000000000000000 00007f96d5212eab XMM09=0000000000000000 00007f96d5212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
